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This  paper  addresses  nuclear  hardness  assurance  as  it  relates  to  system 
I  acquisition,  prerequisition,  prerequisite  efforts  necessary  for  an  affordable 
I  hardness  assurance  program,  and  the  key  aspects  of  the  management  of  he 
program. 
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AIR  FORCE  SYSTEMS  with  general  war  respon- 
sibilities  must  be  capable  of  completing 
their  assigned  missions  during  and  after 
exposure  to  the  hostile  environments  gener¬ 
ated  by  detonations  of  nuclear  weapons.  This 
system  requirement,  nuclear  survivability,  is 
governed  by  an  Air  Force  regulation  (1)* 
which  establishes  policy  for  the  conduct  of 
the  Air  Force  Survivability  Program.  Hard¬ 
ness  is  defined  as  a  measure  of  the  ability 
of  a  system  to  withstand  exposure  to  one  or 
more  nuclear  environments,  and  is  being  spec¬ 
ified  with  ever  increasing  frequency  in  new 
system  acquisition  programs  as  well  as 
replacement  procurements. 

The  various  pluses  of  a  major  system 
acquisition  program  are  depicted  in  Figure  1. 
Under  each  phase  are  the  critical  nuclear 
survivability  actions  which  must  be  accom¬ 
plished  during  that  phase.  During  the  con¬ 
ceptual  phase,  extensive  analyses  considering 
mission,  rcenario,  threat,  cost,  technological 
capability,  and  numerous  other  fsctors  must 
be  conducted  to  establish  nuclear  hardness 
criteria  which  provide  the  necessary  surviv¬ 
ability.  During  the  validation  phase,  the 
criteria  must  be  converted  into  useable 
system  specifications  (e.g.  a  free-field 
electromagnetic  pulse  criterion  must  be 
related  to  system  shielding  requirements  and 
"black-box"  connector-pin  voltages  and 


currents).  A  program  plan  detailing  the 
approach  to  satisfying  the  specifications 
must  also  be  formulated.  During  the  full 
ncale  development  phase,  designs  are 
developed  and  verified.  Hardness  assurance  is 
appropriate  during  the  production  phase  to 
ensure  that  each  production  system  conforms 
to  the  hardened  design.  Hardness  maintenance 
and  surveillance  programs  are  established  and 
implemented  by  the  using  and  maintaining 
agencies  to  insure  that  design  hardness  is 
maintained  throughout  the  operational  life  of 
the  system. 

Although  each  element  is  a  vital  part  of 
the  survivability  program,  experience  has 
shown  that  hardness  at.su  ance  drives  the 
entire  survivability  program.  It  falls 
between  the  development  phase  where  one-of-a- 
kind  prototypes  are  oeing  built  —  sometimes 

on  a  trial  and  error  basis  and  the 

deployment  phase  where  hundreds  of  "identical" 
umts  are  deployed.  An  effective  and 
affordable  hardness  assurance  program  is 
strongly  dependent  on  rather  extensive  prior 
supportive  efforts.  These  efforts  are  in 
addition  to  those  listed  in  Figure  1.  These 
prerequisite  efforts  include  (a)  the  formu- 


*  Numbers  in  parenthesis  designate  references 
at  end  of  paper. 
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Kip,.  1  -  System  acquisition  propr.im  phases 


lation  of  a  program  philosophy,  lb)  the 
detern.inat ion  of  hardness  design  margins,  (c) 
the  documentation  of  hardness-critical 
design  details  and  rationale  and  (d)  the 
development  of  detailed  parts 

specifications. 

The  program  philosophy  consists  of 
basic  ground  rules  established  during  the 
conceptual  phase.  Since  these  ground  rules 
influence  the  remainder  of  the  potentially 
decades-long  survivability  program,  consid¬ 
erable  effort  should  be  expended  in  their 
development  and  refinement.  A  major  consid¬ 
eration  in  their  development  is  the  amount 
of  funds  available  for  the  survivability 
program.  Funds  availability  drives  the  con¬ 
fidence  factor  associated  with  meeting  or 
exceeding  the  hardness  criteria.  Moi.t  aero¬ 
nautical  systems  prugrams  have  fallt.'  in  the 
"Low  cost-medium  confidence"  category, 
whereas  ballistic  missile  programs  (with  no 
man  in  the  loop)  require  higher  confidences. 
Considerations  in  the  effort  to  obtain  the 
maximum  hardness  at  minimum  cost  include 
trades  between  the  immediate  nonrecurring 
cost  of  overdesign  versus  the  recurring  cost 
of  tight  control  over  marginally  hard  sys¬ 
tems,  selective  hardening  of  only  the  mis¬ 
sion  critical  subsystems,  concentration  of 
emphasis  (and  funds)  on  those  elements  of 
the  system  most  critical  to  the  overall  sys¬ 
tem  hardness,  identification  of  other  pro¬ 
gram  requirement  which  may  be  synergistic  to 
the  hardness  requirement  and  the  integration 
of  such  requirements  into  a  single  approach. 
(There  ere  numerous  examples  of  such  syner- 
gisms.  MIL  STD  1533  (2)  relating  to  digi¬ 
tal  equipment  interfacing  results  in  in¬ 
creased  tolerance  of  digital  aystema  to  vol¬ 
tage  transients.  This  increased  tolerance 
is  a  tremendous  boon  to  gamma  rate  and  elec¬ 


tromagnetic  pulse  hardening.  Other  examples 
art*  given  in  references  3  &  4.) 

This  paper  is  based  on  the  work  done  by 
the  authors  at  the  Air  Force  Weapons  Labora¬ 
tory,  Kirtland  Air  Force  Base,  New  Mexico. 
The  original  efforts  were  documented  in  a 
technical  report  directly  oriented  toward 
the  B-l  Program  (3).  (This  report  was 
included  by  reference  in  the  B-l  production 
contract.)  The  results  were  generalised  and 
published  in  a  report  (4)  available  to  the 
general  public.  3'his  paper  summarises  these 
basic  efforts  and  changes  whicn  have  occurred 
in  rasponse  to  se sural  years  of  experience  in 
applying  the  basic  work  to  ongoing  system 
acquisitions. 

NUCLEAR  ENVIRONMENTS 

The  detonation  of  a  nuclear  warhead 
releases  tremendous  amounts  of  energy  in  a 
very  short  time  period.  The  purpose  of  this 
section  is  to  present  a  brief  discussion  of 
the  various  nuclear  environments  resulting 
from  the  detonation  with  particular  attention 
given  to  those  most  pertinent  to  aeronautical 
systems.  Interested  readers  are  referred  to 
Glasstone  (5)  and  to  the  EMP  Awareness  Hand¬ 
book  (6)  for  more  detail. 

The  chain  reaction  comprising  detonation 
produces  energetic  photons  (X-rays  and 
gammas)  and  particleB  (neutrons,  alphas,  and 
betas^.  These  primary  emanations  in  turn  re¬ 
sult  in  secondary  effects,  sometimes  of  more 
impact  than  themselves.  For  example,  a  high 
altitude  detonation  produces  gammas  which  in¬ 
teract  with  the  atmosphere  via  Compton  scat¬ 
tering  and  generate  large  numbers  of  elec¬ 
trons.  Electron  motion  along  the  earth's 
magnetic  field  lines  results  in  radiation  of 
broadband  electromagnetic  energy.  Figure  2 
depicts  the  major  primary  and  interactive 
environments  produced  by  a  detonation. 

There  are  several  general  categories  of 
Air  Force  systems  depending  upon  whether  they 
are  manned  or  unmanned,  whether  they  have 
strategic,  tactical  or  support  roles,  whether 
they  operate  inside  or  outside  the  sensible 
atmosphere,  etc.  Although  nuclear  criteria 
for  each  specific  system  may  vary,  pertinent 
nuclear  environments  for  each  category  of 
systems  are  common  and  the  ranges  of  criteria 
levels  within  a  category  are  bounded  within 
reasonable  limits. 

Aeronautical  systems  include  all  those 
systems  which  operate  within  the  atmosphere. 
This  limitation  generally  eliminates  X-radia¬ 
tion  and  system  generated  electromagnetic 
pulae  as  significant  threats.  Figure  3  de¬ 
picts  the  pertinent  nuclear  environments  and 
representative  levels  of  hardness  which  are 
expected  in  manned  aircraft,  the  most  impor¬ 
tant  and  complex  aeronautical  system.  The 
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Fig.  2  -  Nuclear  environments  -  their  sources 
and  Interrelationships 


lower  hardness  level  is  representative  of 
the  inherent  hardness  expected  of  modern 
aircraft  acquired  with  no  hardness  consider¬ 
ation.  The  higher  is  representative  of  the 
"upper-end"  hardness  level.  Note  however 
that  no  range  is  give  for  the  high  altitude 
electromagnetic  pulse  (EMP)  environment.  It 
is  so  wide-ranging,  i.e.  line-of-sight  from 
the  high  altitude  detonation,  that  distance 
from  the  detonation  no  longer  has  much  sig¬ 
nificance.  For  this  reason,  EMP  is  the  most 
significant  of  the  nuclear  environments, 

HARDNESS  CRITICALITY 

A  typical  aeronautical  system  consists 
ot  Literally  millions  of  individual  ele¬ 
ments.  The  cost  of  controlling  each  end 
every  element  to  maintain  system  hardness 
would  be  astronomical.  However,  a  large 
percentage  of  the  myriad  of  bits  and  pieces 
requires  no  controls  since  no  reasonable 
change  in  their  characteristics  would  affect 
hardness.  The  competing  factions,  i.e.  cost 
and  hardness  assurance,  mandate  the  investi¬ 
gation  and  evaluation  of  each  mission  criti¬ 
cal  design  element  to  determine  whether  or 
not  it  is  critical  to  the  system's  design 
hardness.  If  an  element  is  hardness  criti¬ 
cal,  special  controls  must  be  placed  on  its 
procurement /reprocurement,  a  unique  part 
specification  must  be  prepared,  specific 
design  information  and  rationale  must  be 
documented,  etc.  System  eleme'  ,  either 
nonmission  critical  or  non-hardneat  criti¬ 
cal,  require  no  special  attention. 

A  simple  yts  or  no  breakpoint  tor  hard¬ 
ness  criticality  should  be  adequate  for  the 
structual  components  of  the  system.  How¬ 
ever,  a  modern  system  contains  numerous  sys- 


Fig.  3  -  Nuclear  environments  pertinent  to 
aeronautical  systems  and  reprosentatlve 
system  hardness  levels 


Lems  utilising  semiconductors,  which  are 
potentially  susceptible  to  nuclear  radiation 
and  EMP-generatad  tranaient  voltages.  In 
generaL,  the  electrical  parameter*  charac¬ 
teristic  of  a.ch  part  type  vary  because  of 
minute  differences  in  the  construction  of 
even  seemingly  identical  parts.  Their  elec¬ 
trical  characteristics,  such  as  gain,  fol¬ 
low  some  type  of  statistical  distribution. 
Therefore,  one  particular  part  with  above 
average  characteristics  may  be  quite  herd, 
but  replacement  by  another  part  with  be  low- 
average  characteristics  could  result  in  un¬ 
acceptable  hardness.  To  take  this  property 
into  account,  additional  consideration  is 
required  in  the  categorisation  of  electronic 
pieceparts.  The  method  presently  in  use 
defines  a  mission  criticsL  piecepart  to  be 
either  in  hardness  critical  category  1 
(HCCl),  hardness  criticaL  category  2  (HCC2) 
or  non  hardness  critical.  An  HCCl  part  may 
be  critical  to  the  hardness  design  because 
1)  its  design  margin  is  small  (HCC1M),  2) 
it  ia  hardness  dedicated  (HCClH)  or  3)  it 
is  non  standard  (HCCLS). 

Design  margin  generally  is  defined  to 
be  the  ratio  of  the  environmental  level  at 
which  the  part  ceases  to  function  satisfac¬ 
torily  to  the  criterion,  or  specified  envi¬ 
ronmental  level.  For  example,  the  gain  of  a 
power  transistor  may  drop  below  minimum 
acceptable  value  at  a  neutron  fluence  70 
times  higher  than  the  specification  -  its 
margin  would  be  70  (negiecting  for  now  the 
statistical  nature  of  part  response).  Hard¬ 
ness  dedicated  parts  are  those  used  exclu¬ 
sively  for  hardness.  They  ere  not  needed  in 
the  normal  design.  For  example,  e  gamma 
sensor  in  a  circumvention  scheme  would  be 
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hardnaa»  dedicated  (HCC1H).  Such  a  piece- 
part  must  be  specially  identified  to  prevent 
its  elimination  /ears  later  by  a  zealous  de¬ 
signer  who  can  see  no  purpose  to  it,  or  to 
prevent  its  replacement  by  a  "hard"  part. 
(The  sensor  is  a  "soft"  device,  i.e.  highly 
responsive  to  gamma  photos).  Another  exam¬ 
ple  is  a  transient  voltage  suppressor  used 
to  protect  an  interface  circuit  from  EMP 
induced  transients. 

Non  standard  parts  must  be  identified 
and  tracked  because  the  characteristic 
parameters  of  non  standard  parts  can  vary 
significantly  from  procurement  to  procure¬ 
ment  and  screening  may  be  necessary  to  main¬ 
tain  acceptable  response  characteristics. 

Criteria  used  in  the  determination  of 
the  hardness  critical  category  for  design 
elements  are  addressed  below  for  each  of  the 
nuclear  specification  environments  appli¬ 
cable  to  the  aeronautical  systems. 

NUCLEAR  DLAST  -  The  nuclear  blast  envi¬ 
ronment  is  generally  specified  in  terms  of 
overpressure  (pai)  and  gust  (ft/sec),  Over¬ 
pressure  generates  crushing  effects  on  the 
structures  of  aeronautical  systems.  Gusts 
are  simply  motion  of  air  against  the  system 
similar  to  gusty  winds.  Generally,  the  ays- 
tem  should  be  capable  of  withstanding  sev¬ 
eral  repetitions  of  these  environments. 
Hardening  of  the  system  to  withstand  these 
environments  is  almost  exclusively  limited 
to  the  primary  and  secondary  structure. 

Components  which  must  be  design  hard¬ 
ened  specifically  to  the  biaat  environment 
are  hardness  critical.  Examples  of  possible 
hardness  critical  items  are  weapons  bay 
doors  and  associated  hardware  (potentially 
sensitive  to  overpressure)  and  horizontal 
and/or  vertical  stabilizers  (potentially 
sensitive  to  gust). 

THERMAL  -  The  hermal  environment  for 
the  system  is  usually  specified  in  terms  of 
the  thermal  flux  (cal/cm^  sec)  and  the 
cumulative  thermal  fluence  (cal/cm^). 
These  are  associated  with  weapon  yield  and 
detonation  altitude.  The  system  may  be 
required  to  withstand  several  repetitions  of 
this  environment  without  loss  of  capability 
to  complete  the  mission. 

Hardening  of  the  system  to  thermal 
isdiation  is  almost  exclusively  associated 
with  its  external  components.  Exceptions  to 
this  general  rule  may  be  cockpit  glare 
shields,  thermal  shields,  cockpit  interiors 
(if  no  thermal  shields  are  provided)  and 
components  directly  attached  to  the  inner 
face  of  the  aircraft  akin.  Examples  of 
areas  potentially  critical  to  the  thermal 
environment  are  composite  structural  compo¬ 
nents,  radomes ,  and  honeycomb  panels. 

A  repeated  exposure  requirement  could 
be  cause  for  careful  examination  of  the 
design.  For  example,  a  surface  coating  may 


provide  protection  to  the  underlying 
structure  for  one  exposure  to  the  thermal 
environment,  but  as  a  result  of  this  expo¬ 
sure,  its  reflective  characteristics  could 
be  degraded  so  that  protection  is  inadequate 
for  following  exposures. 

Category  designation  for  the  thermal 
environment  is  similar  to  that  for  blast. 
If  the  design  of  a  component  is  driven  by 
the  thermal  requirement  it  is  designated 
hardneea  critical.  All  other  components  are 
non  hardness  critical. 

NEUTRON  FLUENCE  -  Prompt  neutrons  from 
a  nuclear  detonation  are  high-energy  neutral 
particles  (average  energies  of  about  one 
million  electron  volts,  Mev).  Such  parti¬ 
cles  damage  the  lattice  structure  of  semi¬ 
conductor  devices,  degrading  their  electri¬ 
cal  characteristics.  Such  damage  is  cumula¬ 
tive  so  that  fluence  rather  than  flux  is  of 
more  interest.  The  electrical  parameter 
most  affected  by  neutron  damage,  and  gener¬ 
ally  most  important  to  circuit  design,  is 
the  current  gain,  beta  (B).  Therefore, 
design  margins  will  be  defined  with 
reference  to  this  parameter.  Since  linear 
integrated  circuits  frequently  reflect  a 
composite  gain  related  to  the  internal 
transistors,  this  approach  is  also 
applicable  to  these  devices.  (In  a  few 
specific  circuits,  other  device  parameters, 
such  as  breakdown  voltage  and  delay  time, 
may  be  of  greater  relevance  than  gain.  In 
these  situations,  neutron  induced  changes 
and  related  design  margins  for  these  other 
parameters  should  be  developed  in  a  manner 
similar  to  the  gain  design  margins.) 

Recall  that  design  margin  is  defined  as 
the  ratio  of  the  fluence  value  at  which 

fai lure/unacceptabie  response  occurs  to  the 
specification  fluence  valve. 

Failure/unacceptable  response  is  based  on 
circuit  level  operational  requirements  and 
is  taken  to  be  the  point  at  which  the 
circuit  operation  is  outside  of  the  design 
tolerance  limits.  This  is  generally 
determined  through  circuit  analysis 
utilizing  piecepart  test  data.  Thus  each 
semiconductor  piecepart  degradation  is 
related  to  circuit  operational  requirements. 

An  example  which  illustrates  the 
definitions  of  design  margin  is  presented  in 
Figure  4.  The  upper  curve,  labeled 
empirical  data,  is  a  representative  plot  of 
transistor  gain  as  a  function  of  neutron 
fluence.  This  curve  is  drawn  through  the 
medians  of  the  distribution  of  sample  data 
points,  and  the  extremes  of  the  distribution 
are  shown  by  the  error  tars.  The  lower 

curve  is  obtained  by  applying  the  average 
damage  constant,  derived  from  the  test  data, 
to  the  published  minimum  transistor  gain. 
This  curve  passes  through  the  minimum 
acceptable  value  of  gain,  Bmjn, 
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Fig.  4  -  Representative  plecepart  response 
to  neutron  fluence 


specified  by  the  circuit  designer  (point  A) 
which  establishes  the  failure  fluence  level 
107  (n/cm2).  The  design  margin  is  then 
the  ratio  10y/10x,  where  10*  is  the 
specification  level.  Point  B  is  located  at 
a  fluence  of  10x+^,  that  is,  one  order 
of  magnitude  above  the  specification  Level. 
If  the  breakpoint  between  HCClM  and  HCC2 
were  an  order  of  magnitude  above  specifica¬ 
tion  (Point  B) ,  the  designation  of  the 
piecepart  is  determined  by  whether  point  A 
is  to  the  left  (HCClM)  or  right  (HCC2 )  of 
Point  B.  The  piecepart  used  in  this  example 
is  HCClM. 

For  neutron  fluence,  it  is  recommended 
that  a  design  margin  of  en  ~rder  of 
magnitude  (X10)  be  designated  as  the 
breakpoint  between  HCClM  and  HCC2,  and 
that  two  orders  of  magnitude  (X100)  be 
designated  as  the  break  point  between  KCC2 
and  non  hardness  critical. 

GAMMA  DOSE  RATE  -  Gamma  dose  rate  is 
also  a  prompt  environment  occurring  immedi¬ 
ately  upon  detonation.  A  spherical  tbell  of 


gamma  photons  proceed  outward  from  the 
detonation  at  the  speed  of  light.  These 
gammas  interact  with  semiconductors, 

resulting  in  the  freeing  of  electrons. 

These  electrons  comprise  a  current 

(photocurrent)  which  could  cause  burnout  of 
the  device  and/or  upset  in  both  analog  and 
digital  circuits.  For  the  moderate  Levels 
of  interest  to  aeronautical  systems,  burnout 
is  of  minimum  concern  and  can  be  easily 
prevented.  Detailed  criteria  for 

categorising  analog  and  digital  circuitry 
and  associated  components  are  developed  in 
the  following  paragraphs.  Analog  circuits 
are  circuits  in  which  the  output  is  a 
continuous  function  of  the  input  variable 

over  given  range.  Amplifiers  and  voltage 

regulators  are  generally  considered  analog. 
Digit  al  circuits  are  circuits  which 
generally  operate  at  two  discrete  voltage 
levels. 

Analog  Circuits  -  The  majority  of 
analog  circuitry  and  included  parts  will 
Likely  be  designated  non  hardness  critical 
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for  gamma  dose  rate  effects  since  for  a 
large  portion  of  the  aeronautical  system 
electronics,  the  circuit's  gamma  dose  rate 
perturbation  time  is  much  shorter  than  the 
allowable  transient  response  time  at  the 
circuit  output.  This  allowable  transient 
response  time  is  based  on  the  excitation 
time  of  the  driven  circuit /component .  In 
cases  where  relative  response  times  are  the 
governing  failure  factors,  hardness  criti- 
cality  may  be  based  directly  on  the  ratio  of 
allowable  transient  response  time  to  the 
perturbation  time  rather  than  on  gamma  dose 
rate  (figure  5). 

Analog  circuitry  which  cannot  be 
designated  non  hardness  critical  and  those 
not  analytically  amenable  to  this  approach 
should  be  considered  from  a  functional 
standpoint.  If  the  perturbation  causes  a 
short  inoperative  period,  circuit  blanking 
or  possible  erroneous  digital  information 
(eg.,  analog/digital  converters),  the 
resultant  effects  on  subsystem  operation 
should  be  examined  for  significance  to 
mission  completion  capability.  If  the  only 
result  of  an  analog  circuit  response  to  the 
gamma  pulse  is  a  brief  disruption  which  does 
not  significantly  or  permanently  degrade 
system  performance,  the  circuit  should  be 
designated  non  hardness  critical  for  gamma 
dose  rate.  It  is  recommended  that  those 
malog  circuits  which  cannot  be  designated 
as  non  hardness  critical  be  categorized  in 
accordance  with  figure  5. 

Digital  Circuits  -  Digital  circuitry 
can  usually  be  functionally  classified  as 
either  transient  tolerant  or  transient 
susceptibU.  Transient  tolerant  circuitry 
may  experience  perturbations  or  even  logic 
level  shifts  although  functionally  the 
disruption  does  not  significantly  affect  the 
mission.  Circuitry  used  for  information 
transfer  and  processing,  and  for  control  and 
display  are  often  transient  tolerant.  The 
normal  procedures  of  periodic  updating, 
pulse  integration,  multiple  sourc>'  and 
parity  checks,  and  software  techniques  will 
prevent  the  transients  from  posing  a 
significant  threat.  This  type  of  circuitry 
and  associated  pieceparts  may  be  designated 
non  hardness  critical  on  a  functional 
has  is . 

Transient  susceptible  digital  circuitry 
in  which  a  functional  disruption  or  data 
loss  cannot  be  tolerated  must  be  examined 
carefully  for  transient  magnitudes  and 
response  times.  For  digital  computers  and 
other  circuitry  which  are  not  transient  tol¬ 
erant,  loss  or  scrambling  of  stored  mission- 
critical  information  can  be  prevented  by 
using  circumvention  circuitry  and  associated 
software.  Circumvention  circuits  are  hard¬ 
ness  dedicated  and,  by  definition,  are 
HCC1H.  Circumvention  circuits  generally 


Fig.  5  -  Analog  circuit  criticality  and 
breakpoints 


consist  of  a  radiation  detector  which  gener¬ 
ates  a  signal  upon  exposure  to  gatnna  dose 
rate  environments,  conditioning  circuits 
which  provide  the  required  transfer  func¬ 
tions,  and  a  clamp/diverter  which  directly 
prevents  the  undesired  gamma  response  signal 
from  reaching  the  protected  circuitry.  A 
simple  circumvention  circuit  may  consist  of 
a  single  device  (often  termed  a  clamp)  per¬ 
forming  all  of  the  necessary  functions  and 
may  not  require  a  software  tie-in. 

The  hardness  criticality  of  the  piece- 
parts  contained  in  circumvention  and  con¬ 
trolled  circuits  (figure  6)  must  be  related 
to  both  gamma  sensitivity  and  signal  race 
conditions.  Interrelationships  exist  bet¬ 
ween  relative  sensitivity  thresholds,  and 
also  between  signal  propagation  times  and 
signal  magnitudes  at  the  indicated  summing 
junction.  The  design  intent  is  to  assure 
that  the  circumvention  circuitry  gamma 
sensitivity  threshold  is  adequately  but  not 
excessively  below  the  controlled  circuitry 
threshold  and  to  assure  that  there  is  an 
adequate  time  margin  between  arrival  of  the 
circumvention  signal  and  the  controlled  cir¬ 
cuit  aignal  at  the  critical  summing 
junct ion. 

The  gamma  threshold  for  the  circumvent/ 
divert  function  should  occur  at  one  order  of 
magnitude  dose  rate  level  below  the  similar 
threshold  for  the  controlled  circuitry. 
Where  the  order  of  magnitude  threshold  mar¬ 
gin  is  not  achieved,  the  pieceparts  in  the 
circumvention  network  will  be  designated 
HCC1M.  In  some  circumvention  designs,  the 
critical  threshold  is  in  the  diverter  sec¬ 
tion  only  since  it  acts  as  both  a  detector 
and  a  clamp.  The  remaining  circumvention 


Circumvention  race  conditions 


circuitry  controls  "oft"  time  and  properly 
sequenced  restart  signals. 

Race  conditions  are  interpreted  to  be 
the  relationship  between  arrival  time*  at 
the  summing  junction  (figure  6)  of  the  con¬ 
trolled  circuit  gamma  response  signal  (of  a 
magnitude  related  to  the  protected  circuit 
"disturb"  level)  and  an  adequate  magnitude 
diversion  signal.  The  input  threshold  lovel 
for  disruption  of  the  protected  circuitry 
(e.g.,  disruptive  write  signal  in  memory) 
is  first  determined.  The  time  period  for 
gaimna  response  of  the  controlled  circuit  to 
produce  this  disruption  level  is  then  re¬ 
lated  to  the  response  time  of  the  circumven¬ 
tion  circuit  triiich  will  produce  an  adequate 
compensation  or  diversion  signal  to  prevent 
upset  of  the  protected  circuitry. 

If  the  tine  ratio  of  the  controlled 
circuit  response  (figure  6,  tp  to  the 
circumvention  circuit  response  (t^)  is 
equal  to  or  greater  than  SO,  both  the  i  ir- 
cumvention  and  controlled  circuit  piecepj rts 
will  be  non  hardness  critical,  if  equal  or 
greater  than  five  both  circumvention  and 


controlled  circuit  pieceparts  will  be  desig¬ 
nated  HCC2.  If  this  ratio  is  less  than 
five,  the  circumvention  circuit  parts  Uiich 
affect  the  response  tinr*  will  be  designated 
HCClM  to  apply  a  degree  of  response  time 
controls.  If  this  ratio  is  less  than  two, 
pieceparts  in  both  the  circumvention  circuit 
and  controlled  circuit  stoich  affect  response 
time  will  be  designated  HCClM. 

Where  hardness  dedicated  subcircuits 
having  or.e  or  more  parts  are  used,  the  sub¬ 
circuit  must  be  designated  HCC1H.  This 
could  include  such  items  as  simple  clamps 
and  photocurrent  compensation  devices.  The 
part(s)  would  be  categorised  baswd  on  design 
margin  or  response  time  considerations. 
Only  the  portion  of  the  circuitry  considered 
hardness  dsdicated  is  HCC1H.  The  indent  is 
to  assure  that  the  hardness  dedicated 
subcircuit  is  addressed  properly  in  the 
design  documentation. 

GAMMA  TOTAL  DOSE  -  The  total  dose 
environment  is  the  total  amount  oi  radiation 
absorbed  by  the  pertinent  system  element 
during  the  time  of  interest.  Whereas  the 
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gamma  dose  rate  environment  is  a  prompt 
environment  incurred  during  a  microsecond  or 
less,  the  total  dose  environment  is 
cumulative  over  the  entire  mission.  Typical 
sources  of  the  total  dose  environment  are 
penetrations  of  radioactive  dust  clouds  (7), 
very  low  altitude  fly  overs  of  surfaces 
contaminated  by  radioactive  fallout  (8),  and 
the  prompt  and  early-time  radiation  from 
fireballs  of  nearby  detonations  (9). 

For  levels  pertinent  to  aeronautical 
systems,  the  gamma  total  dose  environment  is 
potentially  oi  cdhcern  only  for 
microelectronic  pie*eparts  utilizing 
metallic  oxide  .dielectrics  (e.g. 
MOSFKTS).  The  gammas  can  interact  with  the 
semiconductor  materials  freeing  electrons. 
Some  electrons  will  be  trapped  in  the 
oxide  near  the 1  oxide/semiconductor  interface 
resultihg  in  changes  to  the  threshold  gate 
voltage  and  other  characteristic  parameters 
ot  the  MOS  devices.  I  t  is  recommeiided  that 
hardnetis  critical  categories  be  based  on  the 
following.  If  the  design  margin  is  100  or 
greater,  the  piecepart  should  be  non 
hardness  critical;  if  the  design  margin  is 
less  than  100,  but  10  or  greater,  the 
piecepart  should  be  H0C2 ;  and  if  the  design 
margin  is  less  than  10,  it  should  be  10C1M. 

ELECT K0MAGNET1C  PULSE  -  Although  local 
KM?  environments  are  generated  by  both 
surface  and . aMnospher ic  detonations,  by  far 
thi;  most  uovere  EMP  is  generated  by 
high  altitude  detonations.  Such  a 

detonation  over  Omaha,  Nebraska  would 
subject  virtually  the  entire  United  States 
to  near  -  uniform  levels  of  EMP  sufficient 
to  threaten  ail  non-hardened  electronic 
systems . 

The  aeronautical  system  acts  as  an 
antenna  excited  by  the  plane  wave  EMP.  Such 
excitation  can  result  in  currents  of  ens  of 
thousands  of  amperes  flowing  in  tne  conduct¬ 
ing  skin.  This  energy  can  couple  into 
system  wiring  Leading  to  interface  < onnec- 
tors  of  electronic  equipment. 

The  overall  system  hardening  approach 
generally  relies  upon  judicious  utilization 
of  shielding  to  decrease  the  energy  coupling 
from  its  skin  and  hardening  of  the  interface 
circuits  of  the  "black  boxes".  Therefore 


conduits,  and  appropi Late  construct  ion  and 
maintenance  procedures.  Each  component  ot 
the  system  with  a  significant  shielding  role 
in  the  EMP  hardening  approach  and/or  whose 
design  is  impacted  by  the  EMP  requirement 
iSj  by  definition,  HCC1H.  Examples  of  HG'LIH 
components/designs  ate:  shielded  bay  doors, 
shielded  bay  construction,  conduits,  conduit 
connectors,  and  Line  relaceable  unit  (LRU'> 
construction  (outside  of  shielded  bays). 

The  electronics  interface  EMP  specifi¬ 
cation  generally  is  a  bulk  cable  core  cur¬ 
rent  requirement  or  an  interface  connector 
pin  current/voltage  requirement.  The  pin 
specification  is  directly  applicable  to 
interface  circuit  analysis,  but  the  bulk 
cable  core  current  must  he  proportioned  to 
the  individual  wires  in  the  wire  bundle  to 
determine  tie  impressed  pin  currents.  This 
relationship  is  generally  dependent  on  the 
number  of  wires  in  the  cable,  cable  lengths 
and  configurations,  and  termination 
impedances.  However,  for  commonality  and 
simplicity,  the  following  relationships  are 
recommended  to  determine  the  distribution  of 
the  bulk  current  to  individual  wire 
currents: 

a.  Above  1  MHz,  the  bulk  cable  core  current 
should  be  equaLly  distributed  among  the  con¬ 
ductors  connected  to  the  interface  connecter 
pins. 

b.  Below  I  MHz,  the  bulk  cable  core  current 
should  be  distributed  among  the  interface 
connector  pins  according  to  the  termination 
impedances  at  the  interfaces. 

Electronic  interface  pieeepurts  may  be 
either  voltage  or  current  sensitive.  How¬ 
ever,  the  sensitivity  can  generally  be  re¬ 
lated  to  impressed  current  at  the  connector 
pin  by  use  of  appropriate  circuit  parame¬ 
ters.  The  hardness  design  margin,  M,  Lin 
db)  is  defined  to  be  20  times  the  log  ratio 
of  the  current  which  will  produce  device 
damage  .  lw  (damage),  to  the  current  at  ihe 
interface  connector,  lw  (spec). 

I  L  .lamapi' ! 
v 

M  .’0  I  or  - - -  ( 1  ) 

1  (  l.prc  1 


both  the  EMP  hardening  approach  and  hardness 

assurance  are  related  to  system  shielding  In  determining  conductor  currents  associated 

and  electronic  equipment  hardening.  Hard-  with  damage  to  an  interface  piecepart,  the 

ness  ciiticality  will  be  de.inod  for  compo-  Wunsch-Bell  model  for  device  burnout  should 

nents  and  methods  having  significance  to  be  used  (10).  This  model  relies  on  the 

shielding  and  for  equipment  interface  cir-  Wunsch-Bell  damage  factor  (or  the  k  factor) 

cuits  and  piecepart*.  of  the  device.  The  criterij  for  determining 

An  EMP  hardening  approach  to  minimize  the  value  of  k  to  be  used  in  calculating  the 

magnetic  coupling  and  to  provide  shielding  Iw  (damage)  are:  (1)  when  tellable,  well- 

tu  attenuate  the  electric  field  effects  may  documented,  and  recent  test  data  (such  as 

include  a  eontrolled-wirlng/cable-routing/  the  test  data  in  recently  developed  data 

electrical-grounuing  concept,  use  of  EMP  banks)  are  available,  k  will  be  taken  at  the 

shielded  beys  tnd  interconnecting  shielded  lower  value  three-sigma  point.  If  this 
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three-sigma  value  is  not  provided  and  it 
cannot  be  calculated  based  on  the  available 
information,  then  the  k  used  will  b<>  the 
given  mean  k  divided  by  three.  (2)  When 
state-of-the-art  analytical  techniques  are 
used  to  calculate  k,  the  k  used  in  the  anal¬ 
ysis  will  be  the  calculated  k  divided  by  10, 
(3)  When  k  factors  based  on  other 
analytical  techniques  (such  as  an  approach 
based  on  device  manufacturer  specification 
sheets)  or  when  tost  data  are  not  covered  by 
the  criteria  in  (1)  above,  the  k  to  be  used 
in  the  analysis  should  be  Lhe  estimated  k 
divided  by  50. 


Vo  correlate  rectangular  .pulse-power 
damage  level  data  to  damped  sine  wave 
specifications  used  in  many  ongoing  system 
programs,  the  following  approach  is 
recommended.  The  standard  Wunsch-Bell  model 
based  on  square  wave  pulse  testing  should  be 
used  for  all  pulses.  The  relationship 
between  the  power  at  failure,  P,  for  the 
rectangular  excitation  pu Lae  is: 


I’  ,  k(w 

P 


Since  Wp,  the  oquare  wove  pulse  width  can 
be  approximated  by  the  expression 


and  is  assomed  to  be  just  sufficient  to  fail 
the  device,  the  power  at  failure  for  the 
damped  sine  wave,  Ps,  is: 


t's  -  k(5ry 


where  f  is  the  frequency  of  the  damped  cine 


HARDNESS  ASSURANCE  DESIGN  DOCUMENTATION 

The  development  phase  of  a  system  acquisi¬ 
tion  program  should  result  in  a  hardened 
baseline  design  which  satisfies  ell  program 
requirements  and  which  has  been  fully  veri¬ 
fied.  Production  systems  would  be  menu  fac¬ 
tored  in  accordance  with  this  fixed  bise- 
line.  However,  this  ideal  situation  is 
rarely  realised.  For  real  systems,  changes 
to  the  baseline  design  are  facts  of  life. 
They  can  occut  for  many  reaaona,  e.g.,  is  a 
result  of  the  flight  test  program,  bee tuae 
tome  parts  and/or  squipaent  which  were  iti- 
lised  in  the  baseline  are  no  longer  aviil- 
able,  because  the  technology  utilised  in  the 
baseline  has  become  obsolete,  because  per¬ 
formance  requirements  of  the  original  syitem 


have  been  revised,  and  numerous  other  rea¬ 
sons.  Many  of  the  above  factors  Are  due  to 
the  relatively  long  development  time 
required  for  complex  modern  systems.  By  the 
time  the  baseline  design  has  been  firmed  up, 
many  facets  of  it  may  be  obsolete. 

Because  changes  in  the  baseline  design 
are  highly  probable,  hardness  assurance  pro¬ 
grams  must  be  flexible  enough  to  adapt  to 
these  changes  and  remain  effective.  Essen¬ 
tial  to  this  flexibility  is  a  detailed  data 
base  which  at  any  given  time  in  the  acquisi¬ 
tion  program  fully  defines  the  present  hard¬ 
ened  baseline  design.  This  data  base  should 
also  contain  design  details  and  rationale 
for  the  various  specific  hardening  tech¬ 
niques  employed,  specific  information  about 
the  required  characteristics  of  each  hard¬ 
ness  critical  element  of  the  design,  and 
other  ralated  information.  This  data  base 
is  termed  the  hardness  assurance  design 
documentation  (HADD), 

In  addition  to  providing  a  current 
definition  of  the  hardened  baseline  design, 
the  HADD  is  essential  to  the  successful 
implementation  of  the  various  management 
controls  required  during  production,  and  the 
definition  of  parts  specifications  for 
procurement  actions  during  production.  The 
HADD  is  also  essential  to  the  follow-on 
hardnesi,  maintenance  efforts. 

For  maximum  cost  effectiveness,  the 
HADD  concept  should  be  included  early  in  the 
development  phase,  Designers  should  be  re¬ 
quired  to  maintain  informal  but  detailed 
notebooks  which  reflect  specific  hardening 
techniques  and  the  rationale  for  selection 
of  that  particular  technique.  Development 
testing  and  documentation  should  be  compat¬ 
ible  with  subsequent  formal  documentation  of 
the  test  effort,  verification  efforts  should 
satisfy  many  of  the  HADD  requirements,  and 
the  system  technical  orders  should  be  com¬ 
plementary  to  the  HADD  requirements. 

The  HADD  must  be  organized  so  that  in¬ 
formation  needed  to  support  s  parts  change, 
a  configuration  change,  or  other  action  can 
easily  be  found.  It  must  also  be  conducive 
to  expansion  and  updating  as  new  information 
it  generated  during  subsequent  program 
phases . 

The  HADD  is  envisioned  essentially  as  a 
library  maintained  initially  at  the  prime 
contractor's  facility  and  later  at  the 
appropriate  logistic  support  centers.  This 
library  would  be  maintained  in  ar.  area  con¬ 
venient  to  the  various  users  and  access 
would  be  controlled  to  assute  the  data 
remained  intact.  Microfilm  and/or  micro- 
fische  could  be  used  where  feasible  to 
reduce  bulk  and  full  time  custodians  would 
be  assigned  for  security,  cataloging, 
filing,  and  support  of  the  users. 
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Much  information  required  for  the  HA 
program  will  bo  available  in  other  program 
documentation,  auch  as  technical  orders, 
design  verification  reports,  Part  11  Speci¬ 
fications  and  Failure  Analysis  Reports. 
This  Informal  inn  should  be  incorporated  into 
the  UADI)  by  reference,  and  copies  of  those 
reports  should  be  maintained  as  a  part  of 
the  HADD  Library.  Data  required,  but  which 
is  not  available  in  existing  sources,  should 
be  generated  and  documented  in  the  HADD, 

Requirements  differ  as  to  the  degree 
and  amount  of  data  needed  for  HCC1  and  2. 
The  specific  data  required  for  both  catego¬ 
ries  are  defined  in  subsequent  paragraphs. 
Most  HCC2  and  all  non  hardness  critical  part 
data  requirements  should  be  satisfied  by 
standard  program, documentation. 

The  following  discussion  is  divided 
between  mechanical  and  structural  elements 
which  are  related  to  bLast,  thermal  and  BMP 
sh  ie  id  ing/bond  i.ng ,  and  elec t r ica  l /elec t ron- 
ics  equipment  which  are  related  to  nuclear 
radiation  and  EMP  interface  effects. 

MECHANICAL/STRUCTURAL  COMPONENTS  -  The 
HADD  will  include  engineering  drawings  show¬ 
ing  details  of  construction,  materisia, 
tolerances,  and  other  relevant  characteris¬ 
tics  or  will  provide  references  to  this 
information  tncludad  in  normally  deliverable 
documentation.  The  hardness  criticality 
category  of  each  part  will  be  lilted  as  a 
function  of  the  nuclear  environment  for 


which  it  is  hardness  critical,  i.e.,  EMP, 
bLast,  or  thermal.  Reasons  for  designating 
parts  as  hardness  critical  and  the  hardness 
design  techniques  (and  rationale  for  these 
techniques)  used  to  attain  the  required 
hardness  will  be  discussed.  If  any  special 
manufacturing  techniques,  materials,  toler¬ 
ances,  etc.,  are  required  fur  hardness, 
appropriate  documentation  must  be  made.  For 
examp ie,  the  type  of  adhesive  in  a  honeycomb 
panel  as  well  as  the  bonding  technique,  may 
be  essential  to  the  thermal  hardness  of  the 
panel.  Shielded  avionic  bay  construction, 
conduits,  detaiLs  of  wing  racewayu .  and 
other  portions  of  structural  design  which 


are  hardness  critical  for  EMP  should  b#  dis¬ 
cussed  in  detail.  Elements  which  are  nei¬ 
ther  elect. r  ica  l /elect  ronic  nor  structural 
such  as  cable  runs,  connectors,  F.MP  seals  on 
I, HU  cases ,  and  other  Like  items  which  are 
required  for  EMP  hardness  must  be 
described. 

ELF, OTRLCAL /ELECTRONIC  PIECEPARTS  -  The 
information  to  be  documented  for  inclusion 
in  the  HADD  in  support  of  nude  -r  radiation 
and  electronic,  interface  EMP  hardness  assur¬ 
ance  is  presented  in  the  following  outline. 
The  informal  ion  requirements  addressed  under 
Subsystem  Description  applies  t  all  minion 
critical  subsystems.  Hardness  critical 
categories  for  control  purposes  ere  applied 
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at  the  part  and  circuit  levels,  but  should 
not  extend  to  the  subsystem  level.  The  sub“ 
system  information  specified  is  Lhnt  which 
should  be  required  and  which  normally  should 
he  developed  for  systems  analysis.  Home  ot 
this  Information  will  he  included  in  deliv¬ 
erable  document  a!  I  on  and  should  lie  included 
in  the  HADD  by  inference  only.  A*  the  eii 
cult  and  parts  level  a  division  Is  made  bet¬ 
ween  documentation  requirements  for  HUOl  and 
HCC2. 

(1)  8ubaystem  Description  (a i l 
mission  critical  subsystems). 

(a)  Operational  description/ 
functional  flow  diagrams. 

(b)  Period  of  mission  when 
subsystem  is  operational. 

(c)  Software:  complete 
descriptive  material  and  programs  which  hnvu 
any  direct  bearing  on  nuclear  surv Lvab 1 l i ty . 

(d)  Subsystem  functional 

requirements  in  term*  of  nominal  and  toler¬ 
ance  values  (ideally,  the  subuyHtem  func¬ 
tional  requirements  and  tolerance  dictate 

the  requirements  and  tolerances  at  the  cir¬ 
cuit  and  plncepatt  Levels), 

(e)  Subsystem  interconnect¬ 
ing  wiring  diagrams  which  permit  determina¬ 
tion  of  interconnections  to  the  circuit 
level,  adequate  nomenu Lature  to  determine  if 
interconnecting  cabling  is  carried  between 
module*  (LRUs),  and  actual  locations  of 
cable  runs. 

(f)  Appropriate  discuss  ions 

of  any  subsyatem  level  approach  used  t.o 

achieve  the  required  hardness. 

(2)  Circuit  Description  (Kens 
with  *  apply  to  circuit  or  piecepar'  HOC 2 , 
while  the  entire  lint  applies  to  HCO/), 

Information  addressing  each  HOC  I  and 
HCC2  circuit  in  the  subsystem  muet  be  pre¬ 
sented  and  will  include,  as  a  minimum,  the 
fo l  lowing: 

*(a)  Circuit  schematic, 

(b)  A  general  electrical 
description  of  the  operation  of  the  i,  -cuit , 

(c)  Circuit  functional 
requirements  in  termu  of  nominal  and 
tolerance  values. 

(d)  A  listing  for  each 
circuit  interface  point  with  pertinent 
nominal  and  tolerance  values  of  ilectrlcal 
parameters  (*.g.,  voltages,  currents  as 
applicable),  wave  forms,  and  special  timing 
rclat  ionships. 

(e)  Discussion  of  the 

approach  by  tAuch  the  circuit  ht-denlng  o 
the  radiation  an!  EMP  Interface  environments 
whs  achieved  (this  will  include  derating 


factors,  design  teehniquua,  parts  selection, 
and  any  upecial  relevance  of  passive  parts). 

*(f)  A  presentation  of 
allowable  response#  at  tie  relevant  circuit 
terminals. 
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(g)  Predicted/ohierved 
radiation  and  EMP  interface  circuit 
responses  (at  the  circuit  and  pieiepart 
levels)  as  related  to  the  allowable 
responses  determined  for  (f)  above. 

(3)  Pieceparts  (Items  with  *  apply 
to  circuit  or  piecepart  HCC2,  whilo  the 
entire  list  applies  to  HCCl). 

A  complete  pieceparts  list  is  required 
and  will  include,  as  a  minimum,  the 
following: 

*(a)  For  passive  pieceparts,  the 
value  and  tolerances  of  electrical  para¬ 
meters  (e.g.,  resistance,  capacitance),  part 
numbers,  and  any  special  hardness  considers- 
t ions , 

*(b)  For  active  devices,  pieiepart 
designation  a, id  MIL-STD  or  applicable  manu¬ 
facturer's  hi-rel  specification,  specific 
circuit  application/location,  values  of 
relevant  electrical  parameters  and  design 
margins  used  in  the  design  considerations, 
and  analyse*  including  typical  min/max 
values  as  appropriate  for  each  location} 
radiation  response  information  with  refer- 
•Mic s  to  the  Information  souroe  to  Include 
relevant  eamma  rata,  gamma  total  dose,  and 
neutron  fluenoe  effect*  data  (in  cases  wh-r* 
the  observed  test  response  is  quite  complex 
(e.g.,  possibly  op-amp  rasponau  for 

different  initial  conditions*,  a  summery  of 
tlu>  data  may  be  presented  With  reference  to 
the  documented  test  data), 

(c)  Manufacturer  and  any  special 
controls  screening  or  qualification  testing 
specified  for  the  pieceparts. 

*(d )  Each  interface  piecepart  must 
be  addressed  in  terms  of  relevant  electrical 
characterist Ice ,  tolerances,  design  margins, 
junction  breakdown  levels,  surge  impedance 
transient  susceptibility  or  k-. actor,  and 
anticipated  EMP-generated  current /vo Ltags 
Level  impressed. 

Electrical  parta  such  aa  solenoids, 
motors  and  other  aimple  electrical  devices 
should  also  be  discusied  in  the.  HADD  includ¬ 
ing  appropriate  hardening  rationale  and 
selection  criteria.  The  critical  concern 
for  these  Items  sill  generally  be  tha 

dielectric  withatending  voltage  (DWV) 
requirement.  Special  design  features,  suen 
as  use  of  surge  suppression  devices,  should 
be  discussed  in  detail. 

It  should  be  emphasised  that  extenelve 
documentation  is  required  tor  HCCl  circuit* 
and  subcircuits.  Howec-r,  the  pieceparts 
contained  in  these  ci*. cults  or  subcircuits 
may  be  HCC2,  or  non  harJr.a's  critical.  In 
tills  case,  only  the  circuit  mutt  be 

dUressed  in  detail. 

ORGANIZATION  AND  FORMAT  -  The  HADD 
should  consist  of  an  l>* ^oductory  volume 
(Volume  I);  a  lifting  of  hardness  critical 


items  (Volume  II)}  sn  HA  Plsn  (Volume  III)} 
end  a  volume  for  each  subsystem. 

Volume  I  should  contain  the  system 
nuclear  criteria  and  supporting  analyses, 
(if  available),  the  system  specifications 
and  supporting  analyses,  and  the  hardening 
approaches  for  the  specified  nuclear 
environments.  (Specific  circuit /piece- 

part  /component /equipment  approaches  should 
be  explained  in  the  appropriate  subsystem 
volume.)  This  discussion  should  include 
design  guidelines  and  restrictions 
provided  to  circuit  designers,  derating 
factors  and  how  they  were  derived,  rationale 
for  shielding  allocations,  thermal  hardening 
approaches,  etc.  Volume  l  should  also 
contain  instructions  on  use  of  the 
HADD, 

Volume  II  should  contain  a  detailed 
listing  of  the  hardness  critical  items  (HCl) 
and  the  nuclear  environment  for  which  they 
are  critical.  For  aach  HCCl  itam  the  basis 
for  which  it  ia  HCCl  will  b*  explained.  The 
format  of  this  volume  will  be  tierad  by 
subaystem,  LRU,  module,  circuit,  and 
piecepart  ao  that  croaa  referencing  from  the 
overall  HADD  to  the  HCL  listing  la 
simplified. 

Volume  III  should  consist  of  an  HA  Plan 
which  should  be  developed  during  RDT4E.  The 
HA  Plan  should  explain  the  managerial, 
organisational,  and  technical  aspects  of  the 
HA  program  and  should  contain  the 
configuration  control,  quality  control, 
end  parts  control  procedures,  and  tha 
methods  used  in  developing  parte 
specifications. 

Each  subaystem  volume  should  contain 
■pacific  hardening  approaches,  technique!, 
and  other  pettinent  information  as  discussed 
in  previous  paragraphs  and  will  be  organised 
on  a  tier  basis,  that  is,  the  subsystem  will 
be  discussed,  then  aubdivialona  for  the  next 
tier  (e.g.,  LRUs*  will  be  discussed,  and  ac 
on  to  the  circuit  level.  A  piecepart  Hat 
should  be  prepared  for  each  circuit  relqt'ig 
part  location  and  hardness  consideration!. 
Tha  specific  information  described  in 
paragraph  3  (b)  above  should  be  provided  for 
each  piecepart. 

Each  associate  contractor  shoutd  pre¬ 
pare  a  Volume  I,  Volume  II,  and  Volume  III 
applicable  to  their  specific  responsibility 
and  equipment.  Tha  prime  (or  deal  atad 
associate)  contractor  should  establish  a 
voluma  numbering  system  and  assign  volume 
number*  i.e.,  (volume  IV  and  higher)  to  the 
associate  contractors.  Tha  outline,  format, 
attd  organisation  of  er.h  subsystem  volume 
should  ba  established  ao  that  all  subsystem 
volumes  for  a  particular  system  will  be 
similar  in  organisation  and  content. 
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PARTS  SPECIFICATIONS 

An  essential  pare  of  the  HA  program  La 
parts  control.  Parti  control  should  b« 
achieved  through  development  and  utilisation 
of  parts  apacif icationa  to  eniure  that  pro¬ 
curement  actions  provide  tha  desired  parta. 
In  tha  following  paragraphs  separata  de¬ 
scriptions  for  specification  requirements 
for  mechanical/atructurai  components  and 
electronic  pieceparts  are  presented.  This 
division  is  appropriate  because  of  the  dif¬ 
ferent  nuclear  hardening  considerations 
appliceble  to  e*  *.h  category.  Slaac,  ther¬ 
mal,  and  EMP  .Wielding  cone iderat ions  are 
pertinent  to  the  first,  while  nuclear  radia¬ 
tion  and  EMP  hardness  cona iders k  ion  a  are 
pertinent  to  the  second. 

MECHANICAL/STRUCTURAL  COMPONENTS  -  Con¬ 
trol  of  mechanical/structural  components 
using  specification*  should  be  relatively 
straightforward.  Each  component  Li  Listed 
In  the  HADD  along  with  its  hardnesa 
criticality.  The  design  of  htirdnea* 
critical  items  haa  been  impacted  by  one  or 
more  of  the  applicable  nuclear  environment*. 
The  specific at  Lons  for  these  itema  thtn  must 
describe  the  specific  requirements  neieesary 
to  ensure  that  the  procured  Items  conform  to 
the  hardened  design.  Any  tpecial 

manufacturing  controls,  tolerances, 
nutturlal,  ate.,  must  ba  Listed  Ln  detail  In 
tha  npeeif Lcation.  The  type  of  verification 
required,  if  any,  and  tha  details  of 
vcriflcatlon/acceptance  should  be 

specified. 

The  dealgna  of  non  hardneae  ui Itical 
Items,  by  definition,  aie  not  driven  by 
nuclear  hardening  requirements ,  Therefore, 
the  specif icationa  for  these  Items  should 
not  be  Impacted  by  the  nuclear  hardening 
requirements.  However,  It  should  be 
emphasised  that  any  changes  In  the 
components,  such  as  material,  manufacturing 
process,  or  dimensions  during  prenurement 
are  subject  to  configuration  control  and 
must  be  evaluated  for  hardness  impact  prior 
to  Approval. 

ELECTRICAL /ELECTRONIC  PIECEPA'wn 

Electrical  parts  are  those  parts  other  than 
mechnanlcal /structural  components  *'  elec¬ 
tronic  pieceparts  such  as  t’  .tors, 
resistors,  inductors,  capacitors,  Integrated 
circuLts,  and  other  similar  parts.  E\ampW»a 
of  electrical  parta  are  solenoids,  v.iotors, 
and  other  simple  electrical  device*. 

In  general,  eleutrlcal  part  are 
relatively  easy  to  describe  an!  the 
specification*'  which  gove,n  their 
procurement  are  straightforward.  Nuclear 
radiation  effect*  on  electrical  parts  will 
generally  be  negligible.  (Electrical 
components  which  incorporate  integral 
semiconductor  controls  will  he  considered 


electronic.)  A  typical  BMP  Interface 
requirement  ?£  a  maximum  Impressed 
C  cans  if  n*.  pin  v'oLrefcc  yenirallv  i*  the  major 
hardening  concern  for  eimple  electric*) 
devices.  If  a  dielectric  elthatandlng  volt¬ 
age  (DWV )  requirement  ha*  been  shown  to  sat* 
lafy  transient  pin  voltage  requirement,  then 
the  apeclf icatloii  may  reflect  mitt  DM*'  •  re¬ 
quirement  rather  than  the  transient  voltage 
requirement . 

The  electronic  pieceparts  control  prob* 
lam  is  considerably  more  complicated,  al¬ 
though  discrete  passive  devices  such  as 
resistors,  capacitor*,  and  inductors  are 
generally  not  significantly  affected  at  mod¬ 
erate  nucLear  environment  levels.  The  com¬ 
plication  arises  because  of  the  extensive 
use  of  semiconductor  devices.  These  devices 
are  potentially  susceptible  to  nucLear  radi¬ 
ation  and  EMP-induced  vo L tages/cur rent  a . 
The  distribution  of  responses  of 
semiconductor  devices  to  nuclear 

environments  may  vary  between  piecepart 
type*  and  even  for  pieceparts  of  the  same 
type,  but  different  manufacturer,  different 
batch,  and  different  Lot.  The  variation  for 
a  particular  piecepart  type  could  be  due  to 
different  manufacturing  techniques, 
construction,  etc.,  even  though  units  are 
interchangeable.  However,  for  a  high 
reliability  manufacturing  process  (i.e.,  one 
in  which  the  yield  is  high  and  the 
manufacturing  process  is  "perfected")  the 
nuclear  response  shouLd  be  reasonably 
uniform. 

No  special  parts  specifications  are 
needad  for  non  hardness  critical  pieceparts. 
Normal  procurement  practices  should  be  fol¬ 
lowed.  For  HCC2  piecepartfc,  the  only  re¬ 
quirement  is  that  they  be  procured  subject 
to  MIL-STD-38510(11)  or  MIL-8TD-19500U2 ) . 
The  former  governs  procurement  of  microcir¬ 
cuits,  and  the  latter  discrete  semiconductor 
devices.  Since  these  two  military  standards 
are  usualiy  included  in  the  system 
procurement  requirements,  the  use  of  these 
requirements  to  control  HCC2  pieceparts 
should  pose  little  extra  effort.  The  ratio¬ 
nale  for  this  action  is  that  only  pieceparts 
from  "mature"  procesaei  will  be  qualified  as 
military  standard  items.  Such  pieceparts 
generally  have  relatively  tight  response 
distributions  which  provide  s  reasonable 
degree  of  confidence  that  the  piecepart 
(which  has  a  relatively  large  design  margin) 
will  not  compromise  system  hardness. 

HCCl  pieceparts  are  another  story.  Re¬ 
call  that  a  piecepart  may  be  designated  as 
HCCl  either  because  of  Its  small  design  mar- 
In  (HCC1M),  its  hardness  dedication 
HCClH),  or  its  being  non  atandard(HCCiS) 
(i.e.  it  it  not  available  ee  a  MIL-STD 
item. ) 
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An  HCC1M  pieceptnt,  even  though  it  it 
procut -d  under  MIL-STD  requirements,  has  a 
response  distribution  which  virtually  guar¬ 
antees  that  some  percentage  of  a  large  num¬ 
ber  ot  procured  pieceparta  would  compromise 
system  hardness.  To  prevent  such  an  occur¬ 
rence  ,  controls  may  be  required  so  that  only 
acceptable  piecaparts  are  used.  Such 
requirements  would  be  above  and  beyond  the 
normal  MIL-STD  requirements  and  would 
probebly  increase  the  procurement  cost. 

HCCIH  piecepirts  will  require  only  HCC2 
procurement  specificstione.  If  HCCiH 

piaceperts  do  not  meet  HCC2  design  margin 
requirements,  they  are  HCC1M.  HCClM 
categorizations  takes  precedence  over 
IlCClil.  The  hardness  critical  designation 
(HCCIH)  is  primarily  a  special  identifier  to 
insure  adequate  treatment  in  the  HADD  and 
during  subsequent  redesign/reprocurement 
actions . 

Pieceparts  not  procurable  under  the 
pertinent  military  standard  are  suspect  be¬ 
cause  they  are  not  manufactured  under 
MIL-STD  control.  The  nuclear  responses  of 
Much  piecepartr.  could  vary  significantly 
with  lot,  and  even  over  a  lot.  Therefore, 
although  the  design  margin  may  be  large, 
(i.e.  in  the  HCC2  area  for  design  margin) 
the  Large  variation  in  response  could  result 
in  compromise  of  system  hardness.  Maximum 
effort  should  be  made  to  eliminate 
nonstandard  piecepart  from  the  design  during 
the  development  phase.  In  many  caaea,  the 
piecepart  is  the  result  of  a  mature  proceas( 
out  the  vendor  has  not  qualified  it.  In 
such  a  case,  the  vendor  may  have  an  in-hou»e 
program  with  requirement*  comparable  to 
those  of  the  military  standard.  Upon  Air 
force  approval,  piecepart*  from  auch  a 
vendor  may  be  treated  in  the  aame  manner  as 
MIL-STD  parts  until  the  vendor  qualifies  the 
parts  to  the  pertinent  military  standard. 

All  piecepart  t  will  have  a  radia¬ 
tion  response  data  bo  developed  to  support 
the  design  and  procurement.  Thia  data  base 
will  take  into  consideration  environmental 
relevance,  e.g.,  if  gamma-induced  photocur- 
reut  is  not  s  relevant  hardening  factor, 
such  photocurrent  data  need  not  be  gener¬ 
ated.  The  piecepart  specification  ehouid 
not  include  radiation  aimulation  testing  as 
a  requirement  unless  absolutely  necessary. 
Actual  rad  (at  ion  test  chaise  teri/./it  ion  of 
pat  In  (h  both  expensive  and  lends  to  gener¬ 
ate  a  technical  problem  not  generally  under¬ 
stood  by  procurement  personnel  and  parts 
manufacturers.  The  parts  specification 
should  be  baaed  on  acceptance  values  for 
kiuiwn  electrical  parameters.  With  thia 
approach,  the  electrical  screening  require¬ 
ments  generally  can  be  performed  on  auto¬ 
mated  production  line  equipment  by  the  parts 
manufacture!  for  a  relatively  small  cost. 


The  following  paragraphs  address  the 
specification  requirements  for  each  of  the 
radiation  environments  for  hardness  critical 
(HCCl)  pieceparts. 

Neutron  Fluence  -  The  predominant 
effect  of  neutron  damage  t.o  eemiconductor 
pieceparts  ia  a  reduction  in  current  gain. 
This  is  noticeable  in  discrete  transistors 
and  in  the  composite  gain  of  transistors  in 
an  integrated  circuit. 

When  s  translator  is  designated  HCCl 
based  on  disign  margin  and  ueulrun-induced 
gain  loss,  electrical  screening  for  gain, 
gain-bandwidth  product  or  both  may  be  levied 
in  tlv.  part  specification  to  truncate  the 
response  distribution  and  achieve  an  accept¬ 
able  margin.  Good  correlation  has  been 
found  between  the  gain-bandwidth  product 
(f^)  and  neutron  induced  gain  degradation. 
This  correlation  is  expressed  in  the  form 
(ref  13). 
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N  is  the  neutron  fluence  (n/cm) 

Kn  is  the  damage  factor  associated 
with  neutron  degradation 

is  the  gain-bandwidth  product 
In  a  few  circuit  applicst lone ,  other 
electrical  parameter*  such  as  breakdown  vol¬ 
tage  or  propagation  time  can  be  more  criti¬ 
cal  than  gain.  Electrical  screens  for  neu¬ 
tron  damage  correlation  applicable  to  these 
parameters  are  either  nonexistent  or  not 
wel l-estxbl ished.  For  the  majority  of  semi¬ 
conductor  devices  other  than  bipolar  tran¬ 
sistor*,  there  is  also  a  lack  of  neutron 
damage  correlation  factors.  If  a  contractor 
elects  to  specify  an  electrical  screen  other 
than  B  or  the  ft  screen,  supporting  data 
justifying  the  screen  must  be  generated. 

When  HCClM  part*  have  e  neutron  design 
margin  lees  than  a  factor  of  five, 
consideration  should  be  given  to  parte 
substitution/  circuit  redesign.  Ths  cost 
effectiveness  of  stringent  controls  as 
opposud  to  parts  substitution/redesign, 
should  be  studied  end  the  most  economical 
approach  taken. 

Gamma  Dots  Rate  -  The  majority  of  the 
electronic  pieceparta  in  an  aeronautical 
system  should  be  non  hardness  critical  for 
the  gamma  dose  rate  environment  unless  they 
are  part  of  a  digital  processing 
circumvention  scheme.  (An  example  of  an 
exception  could  bo  a  light  emitting  diode 
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(LED)  In  a  data  entry  unit.  LED*  art  quite* 
sensitive  to  gamma  dost  rata  and  may  wall  ba 
hardness  critical.)  This  is  vary  fortunate 
because  of  the  high  cost  associated  with  the 
imposition  of  a  gamma  dote  rata 

^pacification  on  piecapart  procurement. 

There  currently  exists  no  convenient 
electrical  parameter  screens  for  photo 
current  induced  by  gamma  dose  rate. 
Therefore)  screening  using  a  gamma  dose  rate 
simulation  facility  (e.g.  linear 

accelerator,  or  flash  X-ray)  would  be 
necessary  to  satisfy  the  requirement. 

Rather  than  imposing  direct  specification 

control  of  the  photocurrent  response  of 
semiconductor  pieceparts  to  gamma  dose  rate, 
control  will  probably  be  exercised  over 
parameters  such  as  rise  times,  propagation 
t  mes,  and  saturation  recovery  times  which 
are  critical  for  adequate  circuit 
operation. 

The  following  approach  is  suggested  for 
characterization  or  screening  of  HCC1H  cir¬ 
cumvent  ion/c lamp  circuitry  and  any  other 
gamma  hardness  dedicated  subcircuitt  and 
pieceparts.  Radiation  testing  should  be 
performed  at  an  electronice  construction 
level  that  will  exercise  as  a  unit  the  cir¬ 
cumvention/clamp,  controlled  circuits,  and 
pieceparts.  That  is,  the  combined  circuitry 
should  be  properly  connected  and  operation¬ 
ally  tested,  Test  point  monitoring  should 
provide  essential  information  on  those  para¬ 
meters  (e.g.,  sensitivity  thresholds, 
response  magnitudes,  and  race  conditions) 
required  for  determination  of  response  mar¬ 
gins  and  distributions.  The  objective  is  to 
ascertain  operational  response  for  the  nor¬ 
mally  configured  circuitry  and  to  determine 
response  sensitivity,  times  and  magnitudes 
for  the  critical  subelements  (e.g.,  radia¬ 
tion  detector). 

Testing  requirements  should  be  based  on 
predicted  criticality  for  each  HCC1H  cir¬ 
cuit.  Initially  a  large  fraction  (up  to  100 
percent)  of  the  circuits  or  pieceparts  may 
have  to  be  tested.  When  proper  operation 
has  been  established  and  the  corresponding 
response  distribution  indicates  that  a  small 
random  sample  provides  an  acceptable  risk, 
further  testing  may  be  reduced  or  termi¬ 
nated.  For  instance,  a  computer  with  cir¬ 
cumvention  may  analytically  be  shown  to  have 
a  small  design  margin  in  race  timr.  The 
test  requirements  may  call  for  100  percent 
testing  of  the  first  20  units  with  a  pre¬ 
scribed  decrease  in  sample  sise  if  no  units 
fail.  If  a  significant  number  of  failures 
are  observed,,  failure  mode  analysis  should 
be  performed  to  determine  the  cause.  If 
test  data  confirms  that  a  test  of  only  a 
portion  of  the  HCC1H  circuit  it  required, 
then  a  reduced  teat  effort  should  be 
possible.  For  instance,  it  may  b.>  found 


that  control  and  controlled  circuitry 
operate  well  within  prescribed  sensitivity 
limits,  but  fluctuations  in  iensitiv' tity  of 
the  radiation  detectors  may  cause  problems. 
In  this  case,  a  simplified  screening  test  of 
the  detector  alone  may  be  adequate. 

Gamma  Total  Dose  -  Canute  total  dose 
levels  on  manned  aeronautical  systems  are 
generally  moderate  with  respect  to  the 
majority  of  electronics  equipment  suscept¬ 
ibility  levels.  The  total  dose  sensitivi¬ 
ties  of  moat  electronics  pieceparts  are 
significantly  above  the  human  tolerance 
level.  Thus  most  electronics  pieceparts  may 
be  dismissed  as  nonsusceptible  at  the  total 
dose  specification  level.  A  few  piecepart 
types  including  MOS  devices,  high  gain 
operational  amplifiers  and  bipolar  devices 
operated  at  very  low  bias  current  levels  may 
be  susceptible 

Gamma  tor  •;  dose  degrading  effects  are 
considered  cumulative  and  permanent.  An¬ 
nealing  of  the  total  dose  effects  is  unreli¬ 
able  and  not  an  acceptable  factor  in  suscep¬ 
tibility  determination.  Thua,  the  total 
dose  should  be  considered  to  be  acquired  in 
a  short  period  of  time,  and  no  annealing  of 
the  damage  should  be  considered. 

There  currently  exist  no  adequate  elec¬ 
trical  characterization  methods  which  are 
relatable  to  gamma  dose  susceptibility 
predictions.  The  majority  of  pieceparts  are 
expected  to  be  qualified  to  total  dose 
requirements  through  proper  adjustment  of 
the  neutron /gamma  ratio  during  reactor 
testing  for  neutron  response.  When  it  is 
apparent  from  this  testing  or  earlier  teat 
data  that  a  total  dose  problem  may  exist, 
total  dose  testing  should  be  performed  at  a 
gamma  facility  such  as  a  cobalt  60  source. 
Thus,  any  piecepart  specification  where 
total  dose  problems  exist  must  be  addressed 
in  terms  of  radiation  testing  with 
appropriate  lot  control  and  sampling 
techniques . 

Electromagnetic  Pulse  -  A  great  deal  of 
electronic  equipment  makes  jse  of  surge  sup¬ 
pression  devices,  isolation  transformers, 
bandpass  filters,  and  other  EMP  hardness  de¬ 
dicated  circuits  and  parts  (at  the  inter¬ 
faces)  to  electrical'y  isolate  sensitive 
components  of  LRU  circuitry  from  connector 
interface  EMP  signals.  Even  though  these 
devices  are  designated  HCC1H  (hardness  dedi¬ 
cated  items),  there  are  no  requirements  for 
special  controls  if  specified  current  and 
voltage  handling  capabilities  are  adequate 
to  provide  more  than  10  db  margin  to  the 
devices  themselves  and  to  the  circuits  they 
protect. 

For  semiconductor  components  at  or  near 
the  interface  that  have  less  than  10  dB 
hardness  margin  (HCC1M),  electrical 
parameters  which  can  be  correlated  to  the 
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damage  factor  will  ba  spec  if  ltd  and 
controlled  to  nature  equipment  EMP  hardneaa. 
In  the  caae  of  eemiconductor  devicea  for 
which  there  are  no  known  electrical 
parametera  which  correlate  to  the  damage 
factor,  pulae  tenting  will  be  required  to 
initially  qualify  the  device,  and  periodic 
eMail  temple  tenting  ahould  be  included  in 
the  part  procurement  apecif ication  to  enaure 
that  aubaequent  production  unite  remain 
acceptable. 

Consolidation  of  Piecepart  Requirements 
There  are  likely  to  be  situations  in  which  a 
particular  piecepart  type  it  used  in  a 
number  of  different  circuit  locationa.  The 
piecepart  may  be  deaignated  HCC2  in  dome  of 
the  locationa  and  HCClM  in  the  remaining 
locationa  becauae  of  varying  aocket  detign 
margina.  A  review  of  the  part  type  and 
application  ahould  be  made  to  determine  the 
coat-effective  approach  to  the  part  type 
procurement.  The  review  ahould  conaider 
relative  quantitiea  in  HCC1M  and  HCC2,  HCC1M 
design  margina  in  the  various  locationa  and 
the  poaeibility  of  minor  redeaign  for  near 
HCC2  casea  to  produce  HCC2  design  margins. 
Based  on  this  review  a  determination  can  be 
made  as  to  whether  all  parts  shoud  be 
procured  to  a  single  HCClM  specification  or 
if  a  portion  should  be  procured  to  HCC2 
specifications  and  the  remainder  to  one  or 
more  HCClM  specifications. 

PROGRAM  MANAGEMENT 

The  previous  sections  discussed  the 
prerequisites  necessary  for  an  effective  and 
affordable  hardness  assurance  program.  The 
successful  completion  of  those  efforts  will 
now  be  assumed.  This  section  consists  of  a 
discussion  of  the  major  management  efforts 
required  during  the  production  phase  to 
ensure  that  the  hardened  design  is  reflected 
in  each  of  the  systems  turned  over  to  the 
user. 

Probably  the  one  most  critical  part  of 
a  successful  hardness  assurance  program  is 
its  program  manager.  Hardness  assurance 
tasks  will  influence  and  impact  alraoat  all 
company  divisions  from  engineering  to 
procurement.  Only  an  aggressive  and 
knowledgeable  individual  with  top-level 
management  support  can  overcome  the 
resistance  from  the  "we've  always  done  it 
this  way"  crowd. 

Maintaining  the  hardening  design  during 
the  production  phase  can  be  achieved  through 
three  major  management  efforts, 
configuration  control,  quality  control,  and 
parts  control.  Configuration  control 
consists  of  those  actions  which  are  required 
to  ensure  that  no  changes  are  made  to  the 
baseline  hardened  design  (as  defined  by  the 
HADD)  without  review  and  approval.  Quality 


control  procedures  must  be  formulated  and 
implemented  to  ensure  that  hardness  is  not 
inadvertently  compromised  during 

manufacture.  Parts  control  procedures  must 
be  implemented  to  ensure  that  the  lowest 
tier  elements  conform  to  the  baseline 
hardened  design. 

Military  Standards  applicable  to  these 
programs  are  MIL-STD-480,  MIL-Q-9858A,  and 
MIL-8TD-891  for  configuration  control,  qual¬ 
ity  control,  and  parts  control,  respectively 
(refs.  14,  15,  and  16).  Specific  nuclear 
hardness  related  activities  required  for 
hardness  assurance  should  be  integrated  into 
the  existing  framework  of  the  standard  pro¬ 
grams  to  minimize  duplication  of  effort  and 
cost.  The  prime  contractor(s)  must  also 
ensure  that  components/equipment  procured 
from  subcontractors  is  subjected  to  the  same 
type  of  controls. 

CONFIGURATION  CONTROL  -  In  this  paper  a 
change  is  any  action  which  results  in  a 
departure  from  the  baseline  hardened  design 
as  defined  in  the  HADD,  Examples  of  changes 
are  replacement  of  any  structural  element, 
such  as  a  rivet  or  panel,  by  one  not  meeting 
the  original  requirements  (different  mate¬ 
rial,  different  manufacturing  process,  dif¬ 
ferent  tolerances,  different  coating,  dif¬ 
ferent  dimensions,  etc.);  replacement  of  an 
electronic  piecepart  by  one  of  a  different 
type,  or  different  construction  or  manufac¬ 
turing  process  (even  though  the  electrical 
characteristics  may  be  identical);  circuit 
redesign;  any  and  all  redesigns  of  structure 
or  subsystem;  and  changes  in  system  softwsre 
having  a  direct  relationship  to  hardness. 

To  ensure  thet.  all  changes  are  subject 
to  careful  examination  and  approval  prior  to 
implementation,  a  Configuration  Control 
Board  (CCB)  must  be  established  by  each  con¬ 
tractor  (Fig  7).  A  nuclear  hardness  spe¬ 
cialist  familiar  with  all  respects  of  the 
hardened  design  must  be  a  permanent  member 
of  the  LCB  or  have  Bignoff  authority  on  all 
changes.  This  board  must  have  approval 
authority  over  all  changes  in  the  baseline 
configuration.  Changes  resulting  in  dif¬ 
ferent  parts  specifications  or  characteris¬ 
tics  of  the  parts  used  in  the  design  must  be 
referred  to  the  Parts  Control  Board  (PCB). 
All  changes  must  be  evaluated  by  the  nuclear 
hardness  specialist  with  assistance  coming 
from  the  staff  of  the  nuclear  hardness 
section  and  other  engineering  sections  as 
required.  This  evaluation  must  include  the 
impact  on  the  hardness  of  the  system,  the 
cost,  the  effect  on  the  hardness  assurance 
and  subsequent  hardness  maintenance/ 
surveillance  programs,  and  recommendations 
for  alternate  approaches.  Thus,  attached  to 
each  change  proposal  will  be  the  evaluation 
of  the  change  with  respect  to  system 
hardness,  consequences  of  the  change  if 
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approved,  and  tha  recommended  position  on 
the  change  (approval/diaapproval ).  If 
approved,  tha  CCB  would  then  forwerd  tha 
recoananded  change  with  tha  results  of  tha 
evaluation  for  Air  Force  approval. 

Tha  following  example  is  presented  to 
illustrate  CCB  actions.  8uppose  a  particu¬ 
lar  electronic  circuit  requires  redesign  for 
performance  reasons.  The  circuit  had  been 
HCC2  and  was  composed  of  pieceparts  which 
ware  also  HCC2.  Tha  proposed  modification 
could  result  in  several  of  the  pieceparts 
becoming  HCClK.  Therefore,  these  pieceparts 
would  now  be  subject  to  more  etringent 
procurement  controls,  and  there  could  be  a 
significant  cost  impact  asssociated  with  the 
modification.  This  would  be  reported  to  the 
CCB.  The  CCB  may  require  investigation  to 
determine  if  another  approach  to  the  problem 
might  yield  a  modification  which  would  aolve 
the  original  problem  and  not  create  a 
significant  impact  on  HA  costs. 

The  need  for  change  may  result  from 
initial  operational  experience,  revised  re¬ 
quirements,  production  difficulties,  parts 


acquisition  problems,  etc.  These  must  all 
be  coordinated  through  the  CCB.  Many 
configuration  changes,  such  as  circuit 
redesign,  requite  new  parts  and  revised 
manufacturing  procedures.  Thersfore  the 
change  proposal  must  go  to  the  Parts  Control 
Board  for  action  on  parts,  and  to  the 
Quality  Assurance  Board  (QAB)  to  ensure  that 
appropriate  quality  aasurance  procedures  are 
developed  for  the  new  configuration. 

The  HADD  plays  an  essential  role  in 
this  change  control.  Reference  to  the  HADD 
can  be  made  to  check  the  baseline  design  and 
to  determine  the  hardness  criticality  of  the 
elements  for  which  changes  are  being  recom¬ 
mended.  The  HADD  must  be  updated  with  all 
approved  changes.  After  Air  Force  approvsl, 
the  changes  are  sent  to  the  appropriate 
agency  for  implementation  and  to  the  HADD 
section  to  update  the  baseline  design. 

It  is  emphasised  that  all  mission  crit¬ 
ical  equipment  and  elements  tRereof  are  sub¬ 
ject  to  this  strict  change  control  and  not 
juat  the  HCC1  hardnees  critical  items.  (In 
fact,  sine-  the  CCB  is  the  vehicle  for  ail 


configuration  control,  ail  system  elements, 
even  non  miasion  critical,  will  be 
controlled  by  the  CCB  and  maintained  in  the 
HADD.)  It  is  this  strict  control  which 
allows  the  implementation  of  a  cost- 
effective  HA  program. 

QUALITY  ASSURANCE  -  Quality  assurance 
ensures  the  output  of  the  assembly /manufac¬ 
turing  process  conforms  to  the  baseline 
hardened  design.  The  quality  assurance  pro¬ 
cedures  required  for  hardness  assurance  will 
be  incorporated  in  the  normal  QA  program 
governed  by  MIL-Q-98S8A. 

A  prerequisite  task  to  quality  utui 
ance  inspections  is  the  translation  of  ap¬ 
plicable  design  parameters  and  hardening 
approaches  into  specific  manufacturing/as- 
sembly  instructions  to  ensure  that  design 
hardness  is  maintained.  These  instructions 
must  be  clear,  concise,  and  specific  so  that 
a  technician  can  implement  them  in  such  a 
manner  that  the  configuration  defined  in  the 
baseline  design  is  achieved.  Areas 
requiring  QAB  control  include  connector 
torque  requirements  necessary  for  adequate 
EMP  shielding  effectiveness,  intra-LRU  wire 
routing  to  minimise  coupling  to  interior 
circuits  from  EMP  interface  circuits:  proper 
cable  shield  terminations;  circumvention/ 
clamp  circuit  configuration  requirements 
necessary  for  satisfactory  operation  of 
these  circuits;  LRU,  conduit,  and  hydraulic/ 
fuel  Line  bonding;  and  avionics  shielded  bay 
door  installation.  Those  procedures, 
drawings,  work  instructions,  etc.,  involving 
hardness  critical  items,  must  be  clearly 
flagged  to  indicate  that  they  are  crit¬ 
ical  elements  in  the  hardness  assurance 
effort . 

The  task  of  developing  QA  procedures 
should  be  a  combined  effort  between  person¬ 
nel  of  the  hardness  group  and  appropriate 
production  personnel.  These  procedures  will 
be  incorporated  into  the  overall  system  and 
subsystem  manufacturing  and  assembly  QA  pro¬ 
cedures,  which  will  be  maintained  current  as 
part  of  the  HADD  library. 

The  next  task  is  to  examine  the  manu¬ 
facturing  processes  and  select  and  document 
those  procedures  vdiich  must  be  monitored  by 
qualified  inspectors  end  to  identify  points 
in  the  manufacturing/assembly  where  inspec¬ 
tions  are  required  to  ensure  the  quelity  of 
the  process.  Included  in  this  task  may  be 
the  definition  of  connector  torque  tests, 
"sniffer"  tests  of  RF  gaskets,  LRU  current 
injection  tests  for  EMP,  and  LRU  nuclear 
radiation  tests.  The  rationale  for  these 
tests  should  be  documented  in  detail  to  sup¬ 
port  any  specific  nuclear  hardness  quality 
assurance  testing.  The  inspection  and  test 
procedures  related  to  HC  items  should  be 


flagged  such  that  they  cannot  be  changed 
without  approval  of  the  nuclear  hardness 
section. 

The  managerial  control  exercised  in  the 
QA  program  will  be  centralized  in  the  con¬ 
tractor  QAB.  After  completing  the  defini¬ 
tion  of  the  detailed  program,  the  QAB  will 
ensure  maximum  effectiveness  and  prevent 
changes  to  the  program  which  could  degrade 
hardness.  (Layout  will  be  similar  to  that 
cf  the  CCB  as  depicted  in  figure  7). 

The  nuc  ear  hardening  features  of  the 
QA  program  should  be  documented  and  main¬ 
tained  in  the  HADD.  The  QAB  should  evaluate 
all  proposed  changes  to  the  program  prior  to 
implumentat i on.  All  changes  should  be  coor¬ 
dinated  with  the  nuclear  hardness  section, 
and  new  procedures  related  to  nuclear  hard¬ 
ening  should  be  appropriately  flagged. 
Occasionally,  changes  in  manufacturing/in- 
stailation  procedures  will  mandate  redesign¬ 
ing  and/or  parts  changes.  In  these  cases, 
coordination  between  the  CCB  and  PCB  is  re¬ 
quired  and  if  the  changes  are  approved,  then 
appropriate  action  by  the  CCB  and  PCB  is 
required. 

PARTS  CONTROL  -  Standard  program  parts 
control  procedures  are  described  in  MI1-STD- 
891  (USAF ) .  The  parts  control  program 
should  conform  to  these  standard  require¬ 
ments  to  the  maximum  extent  possible.  How¬ 
ever,  the  standard  program  must  be  expanded 
to  include  nuclear  hardening  aopects  and  to 
include  coverage  of  all  types  of  parts.  The 
primary  method  of  parts  control  should  be 
the  development  of  parts  specifications 
which  reflect  the  requirements  and  charac¬ 
teristics  necessary  for  part  conformance  to 
the  baseline  hardened  design. 

For  purposes  of  this  discussion,  it  is 
assumed  a  complete  set  of  parts  specifica¬ 
tions  has  been  developed  (and  maintained 
current  as  ,art  of  the  HADD  library).  The 
PCB  must  maintain  the  baseline  parts  specif¬ 
ications  in  a  current  status  and  ensure  that 
all  procurement  actions  incorporate  the 
appropriate  specifications.  The  PCB  should 
also  evaluate  and  minimize  additions  to  the 
parts  list.  Changes  in  any  basic  part  may 
have  serious  effects  at  a  higher  tier  level 
in  the  design.  For  example,  a  simple  resis¬ 
tor  change  could  seriously  impact  circuit 
characteristics  and  the  hardness  criticality 
of  many  associated  piaceparts.  A  change  in 
a  structural  component  could  impact  blast, 
thermal  or  EMP  hardness.  Thus,  a  part 
chrngs  represents  a  departure  from  the  base¬ 
line  configuration  and  must  be  referred  to 
the  CCB. 

The  PCB  flow  of  events  is  similar  to 
that  for  the  CCB  (figure  7).  The  parts 
specifications  should  be  kept  current  by  the 
PCB.  A  complete  set  of  the  parts  specifics- 
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Ciona  should  be  maintained  as  a  :*rt  of  the 
HADD. 

CONCLUSIONS 

Hardness  assurance  it  a  critical  part 
of  the  life  cycle  survivability  program  and 
must  be  integrated  into  the  entire 
acquisition  process.  A.  program  bated  on  the 
above  considerations  muat  be  developed  and 
implemented  to  achieve  affordable  system 
survivability  over  its  procurement  and 
operational  life. 
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